cms.c2sgmbh/src
Martin Porwoll ab4ee4bb70 fix(access): allow tenant resolution from query parameter in tenantScopedPublicRead
Previously, tenantScopedPublicRead only resolved the tenant from the Host
header, which fails when frontend API clients call cms.c2sgmbh.de (the CMS
hostname doesn't match any tenant domain). Now falls back to extracting the
tenant ID from the where[tenant][equals] query parameter. The returned access
filter still enforces tenant isolation.

Also adds seed script for zweitmeinung (tenant 12) with all content:
site settings, 2 service categories, 6 services, 24 FAQs, navigation,
4 social links, and contact form.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-21 00:44:42 +00:00
..
app fix: stabilize guard responses and validation typing 2026-02-17 11:47:55 +00:00
blocks feat: multi-tenant contact form refactoring 2026-02-17 16:22:58 +00:00
collections fix: form submission hooks — tenant propagation + email notification 2026-02-17 16:58:40 +00:00
components/admin fix: resolve global typecheck errors 2026-02-17 08:57:32 +00:00
globals fix: resolve multiple admin panel bugs 2025-12-26 23:21:23 +00:00
hooks fix: form submission hooks — tenant propagation + email notification 2026-02-17 16:58:40 +00:00
jobs fix: resolve global typecheck errors 2026-02-17 08:57:32 +00:00
lib fix(access): allow tenant resolution from query parameter in tenantScopedPublicRead 2026-02-21 00:44:42 +00:00
migrations feat: multi-tenant contact form refactoring 2026-02-17 16:22:58 +00:00
types feat(community): Phase 2.3 - Meta (Facebook + Instagram) Integration 2026-01-16 21:28:40 +00:00
instrumentation.ts feat: security hardening, monitoring improvements, and API guards 2026-02-17 11:42:56 +00:00
middleware.ts feat(security): enhance CSRF, IP allowlist, and rate limiter with strict production checks 2025-12-18 05:06:15 +00:00
payload-generated-schema.ts feat(Community): add Community Inbox View, Rules Engine, and YouTube OAuth 2026-01-15 16:26:08 +00:00
payload-types.ts feat: multi-tenant contact form refactoring 2026-02-17 16:22:58 +00:00
payload.config.ts fix(cors): add sv-frontend IP to CORS and CSRF whitelist 2026-02-17 17:23:35 +00:00